20 octobre 2024 | International, C4ISR, Sécurité
Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials
Unknown hackers exploited a patched Roundcube XSS flaw in phishing attacks to steal sensitive credentials.
23 janvier 2019 | International, C4ISR
The Army wants to use AI to prevent cyberattacks
By: Justin Lynch
If the U.S. Army has its way, soldiers deployed on the battlefield will be shielded from cyberattacks without human involvement.
The Army's Aberdeen Proving Ground is conducting research into how artificial intelligence can protect soldiers' tactical networks and communications from cyberattacks, according to a Jan 14. announcement.
Among the areas of research are ways for machine learning to automatically detect known cyber vulnerabilities, spot previously unknown malware and respond to a cyberattack.
After the market research is submitted, the Army will use the submissions for informational and planning purposes only.
The Army's hunt for AI research comes as the Pentagon has grown more interested in defending against cyberattacks that itself use machine learning. It is a future where machines will fight machines in cyberspace. That concern was evident in the service's announcement.
“The cyber technology will secure automated network decisions and defend against adaptive autonomous cyberattacks at machine speed,” the Army wrote.
Evidence of the Army's focus on AI was evident during the 2018 CyCon conference in November.
The Army is interested in three primary categories of artificial intelligence attacks, Maj. Nathan Bastian, a researcher at the Army Cyber Institute said during the conference.
First, data poisoning is a method in which an attacker inserts malicious information into a data set. Because artificial intelligence relies on these data sets to make decisions, their manipulation blunts machine learning's effectiveness, Bastian said.
Second, an attack on artificial intelligence can take place by changing the classification methods. For example, if a cat is incorrectly labeled as a dog, than artificial intelligence's use is mitigated, Bastian said.
Third, an inference attack, or figuring out where machine learning's boundaries lie, can be a weapon to defeat artificial intelligence. By discovering the limitations of the machine's algorithm, Bastian said hackers can manipulate its effectiveness.
The Department of Defense has expanded its research into AI in recent months.
In October 2018, the service created its AI task force, which is located at Carnegie Mellon University. Projects are initiated by the Army Futures Command. The Pentagon also created its Joint AI Center in the summer of 2018.
At the CyCon conference, Brig. Gen. Matthew Easley, head of the Army's new AI task force, said that the Pentagon needs to integrate commercial AI products.
“The commercial sector is driving current breakthroughs in applications of AI,” Easley said.
Easley laid out four principles for what the Army sees as a successful AI project. They include clean data, an articulate use case, talent and technology.
However, Easley cautioned about the boundaries of machine learning during the event. Limitations of AI can include a sample size that is too small and limited ability to use the machine learning in the field. He also said that AI struggles to detect zero-day attacks, which are programming bugs.
“AI is not all that easy,” Easley said. “Realizing the potential of AI will require major transformation,” for the Pentagon.
https://www.fifthdomain.com/dod/2019/01/22/the-army-wants-to-use-ai-to-prevent-cyberattacks
Sur le même sujet
-
-
6 septembre 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité
The US Army faces struggles working with small businesses
By: David B. Larter WASHINGTON — The U.S. Army faces problems on multiple fronts when it comes to sending business to small companies, the head of Army Futures Command said Wednesday. Gen. John Murray said small businesses struggle under a procurement system that can take years, and then struggle to scale their businesses to meet the Army's needs. “There is a lack of trust [on the part of small businesses] that the government can sustain [a] small-business model,” Murray told the audience at the third annual Defense News Conference. “The way we do budgeting, [program objectives memorandum] POM cycles and all that — a small business can't survive. We're going to have to prove to small businesses that we can adjust our POM cycles to meet their needs. “And from the small business perspective, there are only a few ways that they can scale to the size we are talking about in terms of production. One of those ways is partnering with a traditional [defense contractor], so that's going to be a challenge going forward.” Murray's comments come as the Army tries to engage with a range of partners — from universities and small businesses to the traditional prime contractors such as Raytheon and General Dynamics — to find ways to integrate new technologies into the force. The outreach to small businesses at Army Futures Command is about finding new ways to get after the challenges the service faces, Murray said, but that in and of itself comes with challenges. “This outreach to small business is not because there is anything wrong with traditional defense primes, it's really an outreach to find new ways to solve our problems,” he said. “I've been in the Army 37 years, and I think about solving our problems a certain way. I guarantee a lot of these small businesses think about how to solve problems a different way. “Part of the challenge I have with small business is comfortably describing our problem to them. I can't talk in acronyms, I can't talk with 37 years of experience, I need to talk very clearly and very plainly.” Murray said his teams have staged events aimed at the private sector, such as a recent one where startups gathered to figure out how to move artillery shells 250 meters using autonomous unmanned systems. Such events have been instructive, he noted. Ultimately, however, the Army will choose the business that best meets the service's requirements, he said. “What it really comes down to is what are our problems and where is the best place — whether that's small business or a university or a traditional prime — where is the best place to solve that problem,” Murray said. https://www.defensenews.com/smr/defense-news-conference/2019/09/04/the-us-army-faces-struggles-working-with-small-businesses/
-
22 mai 2020 | International, Aérospatial
En Inde, Dassault voit s’éloigner tout espoir de nouvelle commande de Rafale
Dans un contexte de crise économique aggravée par le coronavirus, une bagarre se joue au sommet de l'état-major indien à propos d'un appel d'offres lancé il y a deux ans pour l'achat de 114 avions de combat. Par Guillaume Delacroix Publié le 20 mai 2020 à 09h03 - Mis à jour le 20 mai 2020 à 12h42 L'épidémie de Covid-19 fait une victime inattendue en Inde : le groupe Dassault Aviation. Celui-ci est en train de voir s'envoler ses espoirs de fournir une bonne centaine de Rafale supplémentaires au géant d'Asie du Sud. Le constructeur aéronautique français, qui a reçu commande de 36 exemplaires biplaces de cet avion de combat pour 8 milliards d'euros en septembre 2016, vient d'apprendre de la bouche du nouveau chef d'état-major des armées indiennes que l'appel d'offres international lancé en avril 2018 pour l'achat de 114 autres appareils était en passe d'être annulé. C'est un marché évalué à 1 000 milliards de roupies (12,2 milliards d'euros) qui va vraisemblablement s'évaporer. « L'Indian Air Force est en train de se réorienter vers des avions de combat légers » produits dans le sous-continent, a déclaré le général Bipin Rawat à l'agence Bloomberg, jeudi 14 mai. En l'occurrence, des Tejas LCA (Light Combat Aircraft). C'est une énorme déconvenue pour l'avionneur français, à qui l'Inde devait initialement acheter 126 Rafale, et non pas 36. Les quatre premières livraisons devaient d'ailleurs avoir lieu ce mois-ci, mais la crise sanitaire mondiale en cours l'a contraint à les reporter à juillet. D'autres constructeurs en sont pour leurs frais, qui entendaient eux aussi remettre une offre pour les 114 nouveaux avions. Parmi eux, les américains Lockheed Martin et Boeing, le suédois Saab et le russe Soukhoï. Le Tejas, avion « made in India » Confrontée à un ralentissement économique historique en 2019, avec une croissance du produit intérieur brut (PIB) à moins de 5 % – alors qu'elle approchait 9 % il y a un peu plus de deux ans –, l'économie indienne prend de plein fouet les effets de l'épidémie liée au coronavirus et risque désormais de tomber en récession. Dans ces conditions, Delhi n'a plus les moyens de s'équiper auprès de fournisseurs étrangers, a fait comprendre dès la fin du mois d'avril le premier ministre, Narendra Modi, en affirmant que le pays ne se relèverait qu'en produisant « local ». https://www.lemonde.fr/economie/article/2020/05/20/en-inde-dassault-voit-s-eloigner-tout-espoir-de-nouvelle-commande-de-rafale_6040216_3234.html